Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: MPo4L7ijLBM52FgoWUdR65f5stun6wyrqqqVq/hkeCs=
Subject key identifier: 13:3A:31:74:F4:60:A9:8F:89:30:1A:A4:24:C1:FC:FE:53:F6:BD:4C
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 0199C6B34103CB58BCAFF1B6397C5E6B21D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 16C7
Signing time: Thu 09 Oct 2025 02:01:00 +0000
Manifest this update: Thu 09 Oct 2025 02:01:00 +0000
Manifest next update: Fri 10 Oct 2025 02:01:00 +0000
Files and hashes: 1: aJJ-YdVMN1blRA6zgwpwFOSytEA.roa (hash: 18Fas5Pt/vlUe10SXqZ/nCZNIMF4HTl3m3WAOZlwA4Y=)
2: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: qVw2vSlV8rhNSkzCc4tcDgjOWqEwLyS9nN+lXdOK2MQ=)
3: tAP5YUU5DttldDjJZneQqbjMnns.roa (hash: Wr2DWhImWg05UEtM87fECNOHzZETG/9GHlcwfpi8dUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:b3:41:03:cb:58:bc:af:f1:b6:39:7c:5e:6b:21:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Oct 9 02:01:00 2025 GMT
Not After : Oct 10 02:01:00 2025 GMT
Subject: CN=133a3174f460a98f89301aa424c1fcfe53f6bd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:76:55:26:73:7c:71:c4:6b:ef:ff:eb:65:
51:88:34:01:17:e8:e1:1e:ba:f2:d2:e9:f7:d0:1c:
c9:ef:8e:94:14:e3:b7:bf:17:53:2c:e9:12:23:dd:
95:7d:b1:40:d2:ef:f0:fc:de:96:a4:8d:0e:d5:95:
26:60:7c:fd:51:64:d5:2f:e4:16:48:1e:13:24:3e:
69:a9:62:da:f8:03:b0:61:bf:d4:40:d3:4d:80:5f:
73:53:0e:0c:e4:14:24:d8:28:f4:6a:a0:c7:1b:2e:
ff:c1:b6:a3:32:4e:0c:af:b6:52:ef:48:17:70:bc:
d4:59:40:f9:93:ee:d4:2b:95:d4:f0:7d:6e:c9:7a:
55:25:c4:f5:03:29:d4:d1:d5:4e:e4:76:bf:88:96:
a4:86:6e:7f:40:c5:77:cf:98:eb:c3:fc:69:7c:27:
d1:09:84:71:16:59:2c:9b:26:c7:5a:49:41:5b:6b:
6c:76:ea:e8:57:d4:86:8f:b5:47:fc:3d:b8:77:39:
10:44:51:04:bb:89:80:f4:bf:e7:aa:a2:42:ab:dc:
87:d4:bf:67:2f:f1:06:be:de:94:7c:35:9b:e2:92:
b7:2d:38:f8:12:b1:27:e1:bf:00:e3:20:61:1d:db:
24:ad:d1:45:33:0c:49:53:5d:99:1c:dd:f3:1b:30:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3A:31:74:F4:60:A9:8F:89:30:1A:A4:24:C1:FC:FE:53:F6:BD:4C
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:70:c1:19:6d:19:0e:b6:50:f6:ee:35:17:fd:b8:9e:d9:8e:
a2:16:20:64:8c:e6:85:ca:60:2b:02:9c:45:22:65:23:a9:10:
2e:8f:40:62:a8:fa:32:7b:28:8c:74:fb:ff:f6:0c:80:50:8c:
b2:ef:14:5d:a0:f3:80:73:1f:31:f5:06:19:50:0b:c5:78:a2:
21:0b:37:77:6a:74:c4:d5:3a:a1:4e:cc:83:65:38:71:7a:b4:
39:28:7c:f1:79:b3:16:dc:56:34:f9:72:c1:36:69:30:2c:12:
b1:f5:c0:aa:74:90:49:15:21:a6:c5:87:a1:62:e9:ad:6d:03:
52:56:b0:9c:56:1a:82:17:ae:25:d9:66:86:2e:42:99:3c:b1:
e9:c3:08:b9:7b:6b:d7:a3:69:d7:b4:9c:44:45:6b:76:74:cd:
68:e7:31:a2:dc:4c:0c:1b:00:6c:34:1a:89:2c:6f:b8:db:d0:
ff:1e:ac:b7:62:5b:15:32:7e:1b:da:75:c5:48:8e:0e:c0:dc:
6a:d3:6f:16:b5:c5:36:f4:fe:3d:3b:f0:a7:86:3d:c5:7f:29:
29:df:12:7c:3f:9d:f9:d5:54:97:89:4c:a3:5f:9c:37:74:c5:
fa:4d:89:2a:55:ca:d9:a1:4b:27:b6:50:1c:5c:6a:c5:c0:07:
7d:d1:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:20:31 2025 by rpki-client